Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa
File:                     323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa (raw, json)
Hash identifier:          YMP4W1Hqy+IdhQVXEH6z0KbE4UK+4EWxMy0ubnAKZ1k=
Subject key identifier:   B6:6C:00:C1:B3:5B:05:A3:E6:60:02:83:BE:E4:46:CF:AD:F2:21:E3
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       21294C697B72E144A726D6E8A351536A2E13E450
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa
Signing time:             Thu 14 May 2026 00:39:59 +0000
ROA not before:           Thu 14 May 2026 00:34:59 +0000
ROA not after:            Thu 13 May 2027 00:39:59 +0000
asID:                     396993
IP address blocks:        2602:f743:3e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:29:4c:69:7b:72:e1:44:a7:26:d6:e8:a3:51:53:6a:2e:13:e4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: May 14 00:34:59 2026 GMT
            Not After : May 13 00:39:59 2027 GMT
        Subject: CN=B66C00C1B35B05A3E6600283BEE446CFADF221E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:3d:a1:2d:26:15:db:ab:b8:fc:44:9f:67:
                    53:2a:60:29:f7:bc:ec:36:23:d0:b0:85:0e:72:98:
                    30:ba:1c:1d:33:a0:fa:90:5a:5a:1e:34:d9:98:ed:
                    72:43:ea:66:76:11:aa:62:ee:01:8f:8b:3f:a0:5f:
                    a5:00:b2:ea:eb:e9:67:6b:f8:bc:ff:7b:d5:71:d8:
                    2c:95:f8:45:fe:de:03:03:53:d5:da:0a:ed:55:99:
                    e9:66:50:6b:e5:8c:02:ab:7e:22:ea:04:52:84:52:
                    6b:ae:27:25:3d:76:83:ea:b6:bb:d4:7c:df:f0:aa:
                    e9:df:8e:88:d3:4b:9a:f4:a3:8e:76:fa:ec:76:cc:
                    51:08:83:7f:ca:5a:d2:bc:65:86:79:db:f1:7d:14:
                    ac:c9:8d:c2:ef:d1:cd:98:7a:55:cf:6f:41:9b:d9:
                    45:85:99:5d:20:b3:07:b3:30:e8:ba:6f:54:19:dd:
                    97:c5:8a:60:a1:56:02:e3:c8:fe:3b:71:8d:30:a1:
                    10:29:bd:da:69:37:37:12:bc:ae:2a:87:62:21:0f:
                    87:11:93:59:07:8f:e9:1d:8b:e8:01:ae:8b:b1:aa:
                    db:f6:72:24:6c:5f:46:af:4a:5b:81:20:40:c1:4d:
                    2a:51:11:66:88:2e:16:c3:49:a3:8f:c2:2e:92:b8:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6C:00:C1:B3:5B:05:A3:E6:60:02:83:BE:E4:46:CF:AD:F2:21:E3
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365353a3a2f34382d3438203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:3e5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:95:4e:b9:fa:b6:7c:73:18:9b:30:85:69:2f:fa:d8:3a:b0:
         78:65:29:3f:9e:f9:f5:45:c0:bc:80:9f:06:b9:f4:20:1b:1b:
         63:96:2c:1f:e6:9f:a0:f4:d8:5b:8b:9f:d5:53:19:ea:85:d5:
         cd:07:42:10:07:05:ec:df:15:48:72:13:de:8b:c9:e4:50:3c:
         eb:3c:8e:89:5b:89:c6:4f:0b:3d:a4:a8:d1:15:f9:ba:ea:20:
         f0:7c:ec:35:e3:1d:f9:5f:ad:63:cf:f2:c8:4e:02:66:82:0f:
         a4:17:d7:e5:a4:4e:d0:53:d5:30:2b:9d:43:42:fd:84:5d:61:
         9a:35:06:fa:51:a7:ee:1f:94:d6:b8:16:14:80:db:b8:d9:7a:
         0e:1a:e8:e4:b4:7b:43:c9:5f:b3:4c:ec:0e:1a:4f:ee:82:ca:
         f8:51:5e:2b:fd:91:f6:d5:3e:3d:94:72:83:6a:b3:57:d8:c0:
         48:0c:bf:38:b6:67:0f:a2:ae:e8:67:d3:ec:52:f8:ba:77:da:
         23:31:f2:81:ae:f6:d4:cb:5c:ff:94:1e:b1:3f:c1:09:06:38:
         ac:68:db:28:a9:a4:05:56:ba:ac:0c:e5:65:fd:79:35:b5:38:
         02:41:a8:0c:c8:15:ba:be:ec:46:2b:c5:9c:0f:a8:c5:c6:e3:
         f6:f3:0f:f6
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUISlMaXty4USnJtboo1FTai4T5FAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh
YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjYwNTE0MDAzNDU5WhcNMjcwNTEzMDAzOTU5
WjAzMTEwLwYDVQQDEyhCNjZDMDBDMUIzNUIwNUEzRTY2MDAyODNCRUU0NDZDRkFE
RjIyMUUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsg9oS0mFdur
uPxEn2dTKmAp97zsNiPQsIUOcpgwuhwdM6D6kFpaHjTZmO1yQ+pmdhGqYu4Bj4s/
oF+lALLq6+lna/i8/3vVcdgslfhF/t4DA1PV2grtVZnpZlBr5YwCq34i6gRShFJr
riclPXaD6ra71Hzf8Krp346I00ua9KOOdvrsdsxRCIN/ylrSvGWGedvxfRSsyY3C
79HNmHpVz29Bm9lFhZldILMHszDoum9UGd2XxYpgoVYC48j+O3GNMKEQKb3aaTc3
EryuKodiIQ+HEZNZB4/pHYvoAa6Lsarb9nIkbF9Gr0pbgSBAwU0qURFmiC4Ww0mj
j8Iukrhl6wIDAQABo4ICvTCCArkwHQYDVR0OBBYEFLZsAMGzWwWj5mACg77kRs+t
8iHjMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv
MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy
MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi
NzllYzA4YmFjYi8wLzMyMzYzMDMyM2E2NjM3MzQzMzNhMzM2NTM1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3QwPlMA0G
CSqGSIb3DQEBCwUAA4IBAQCjlU65+rZ8cxibMIVpL/rYOrB4ZSk/nvn1RcC8gJ8G
ufQgGxtjliwf5p+g9Nhbi5/VUxnqhdXNB0IQBwXs3xVIchPei8nkUDzrPI6JW4nG
Tws9pKjRFfm66iDwfOw14x35X61jz/LITgJmgg+kF9flpE7QU9UwK51DQv2EXWGa
NQb6UafuH5TWuBYUgNu42XoOGujktHtDyV+zTOwOGk/ugsr4UV4r/ZH21T49lHKD
arNX2MBIDL84tmcPoq7oZ9PsUvi6d9ojMfKBrvbUy1z/lB6xP8EJBjisaNsoqaQF
VrqsDOVl/Xk1tTgCQagMyBW6vuxGK8WcD6jFxuP28w/2
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:33:03 2026 by rpki-client